[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwZk7W8bg_6H9u_-cijBmRR7JoqNCagvZt7uh62EpGTo":3},{"article":4,"iocs":54,"watch_terms":65,"solutions":66,"lesson":69},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"a6880b3d-f768-4e2f-a152-76da2aa96d63","ShinyHunters hacker reportedly detained in Jordan, aiding FBI","shinyhunters-hacker-reportedly-detained-in-jordan-aiding-fbi-a48481","A suspected ShinyHunters hacking group member known online as \"Rey\" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group. [...]","A suspected member of the ShinyHunters extortion group, known as 'Rey' and identified as Saif al-Din Khader, has reportedly been detained in Jordan and is cooperating with the FBI. Khader is allegedly assisting law enforcement by providing access to his devices and communications to help locate other ShinyHunters members. This development follows an FBI crackdown on the group after ShinyHunters claimed a breach of FBI systems.","ShinyHunters member 'Rey' detained in Jordan, cooperating with FBI.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fshinyhunters-hacker-reportedly-detained-in-jordan-aiding-fbi\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F01\u002F25\u002FHacker_prison.jpg","2026-10-03T19:09:38+00:00","2026-10-03T20:00:29.947328+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":19},"Rey",{"name":23,"type":19},"Umbreon",{"name":25,"type":19},"Pepijn van der Stap",{"name":27,"type":19},"Saif al-Din Khader",{"name":29,"type":30},"FBI","vendor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":31,"icon":33,"name":34,"slug":35},null,"Threat Intelligence","threat-intelligence",[37,42,47,52],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":53},{"id":31,"icon":33,"name":34,"slug":35},[55,58,62],{"type":56,"value":18,"context":57},"malware","Extortion group",{"type":59,"value":60,"context":61},"mitre_attack","T1078","Valid Accounts (used in ShinyHunters attacks)",{"type":59,"value":63,"context":64},"T1552","Steal Application Access Token (used in ShinyHunters attacks)",[29],{"controls":67,"vendors":68},[],[],{"slug":70,"title":71,"body":72,"framework_refs":73,"framework_notes":85},"shinyhunters-member-detained-cooperating-with-fbi-after-alleged-breach","ShinyHunters Member Detained, Cooperating with FBI After Alleged Breach","The detention of a ShinyHunters member highlights how extortion groups exploit weak access controls and poor monitoring to breach high-profile targets, including law enforcement systems. The group's activities underscore the persistent threat posed by organized cybercriminal networks that leverage compromised credentials and insider communications to carry out large-scale data theft. This case demonstrates the importance of proactive threat intelligence and cross-border law enforcement cooperation in dismantling such groups. Critically, it also reveals that even sensitive government systems can be targeted, making robust incident response planning non-negotiable for all organizations.",[74,75,76,77,78,79,80,81,82,83,84],"CIS Control 5 - Account Management","CIS Control 8 - Audit Log Management","CIS Control 17 - Incident Response Management","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 IR-4 (Incident Handling)","NIST SP 800-53 AU-2 (Audit Events)","NIST SP 800-53 SI-4 (System Monitoring)","NIST Cybersecurity Framework: Detect (DE.AE-1)","NIST Cybersecurity Framework: Respond (RS.RP-1)","GDPR Article 33 (Notification of Personal Data Breach)","ITIL 4 - Incident Management Practice",{}]